Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
File:                     LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json)
Hash identifier:          AYNTu2Tt+BCRvCKstdG1gzIN6p90EW99Dg5s5oTkRXc=
Subject key identifier:   70:43:9D:C0:CC:44:CF:08:6B:43:A3:12:92:D0:5A:A6:44:35:5F:42
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Certificate issuer:       /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial:       01962E2AFA65644C25DFA25DB431D32B3374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
Manifest number:          016D
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 3RDyrZvZCaLxq028Ow5HCrsQefI.roa (hash: NXFuVuevT7dKqj3U3xabeRYu8pGJV55BCTjMmY4c/fY=)
                          2: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: DFrZuw+nj7+mJd/b7YbyMXbjImFLEAgADVthIC6T4IA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:65:64:4c:25:df:a2:5d:b4:31:d3:2b:33:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=70439dc0cc44cf086b43a31292d05aa644355f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:06:a2:3e:8d:ef:06:f0:93:24:67:7f:96:
                    5c:59:0e:fd:88:bd:eb:64:93:be:a3:b0:83:c7:aa:
                    6f:a8:61:df:1b:c0:9f:48:60:a4:26:73:7a:6e:85:
                    fb:97:3a:9e:37:0f:fe:2c:cc:a1:b8:40:9e:77:84:
                    bd:56:66:09:a9:94:f5:dc:f8:79:88:e8:52:fb:2f:
                    54:77:74:8b:21:54:20:34:51:09:1a:ec:fa:21:3d:
                    a2:9c:da:8e:8a:f7:fa:ae:81:d8:2e:07:82:f6:bc:
                    9c:5a:f1:89:4e:32:27:f6:93:4d:89:ed:40:98:d3:
                    ef:2d:0c:da:9c:ad:a0:06:6f:e4:da:f1:14:c5:92:
                    3e:8e:61:f6:35:fd:ef:75:70:e5:9f:8a:04:d1:4f:
                    06:dc:2a:5e:72:2f:59:de:3b:48:b0:b1:d4:49:26:
                    32:93:76:8d:30:69:c8:fe:a9:39:af:9c:33:b4:60:
                    6a:35:19:25:c7:96:ee:78:f0:30:3a:dc:37:c6:33:
                    80:7c:85:b9:a9:fe:6c:79:d4:cd:57:99:12:72:2e:
                    84:06:42:d7:39:e3:67:b6:fc:5a:37:15:36:12:ca:
                    7b:6c:b9:2b:08:5d:a0:81:de:35:89:76:a6:26:a0:
                    19:ef:78:c9:5d:02:f5:ab:bc:8e:82:07:6f:46:1d:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:43:9D:C0:CC:44:CF:08:6B:43:A3:12:92:D0:5A:A6:44:35:5F:42
            X509v3 Authority Key Identifier:
                keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:eb:e9:54:61:e8:0a:9d:fe:c1:4a:3e:f6:a4:fe:78:f1:95:
         49:98:41:bc:8d:8b:48:90:70:c0:6f:36:a1:16:97:f1:d6:65:
         6c:2b:8c:a2:7f:28:36:1e:ae:6e:61:93:e9:77:65:9c:50:cd:
         97:ed:75:2f:42:ac:9c:c0:6d:9b:6f:dc:87:0d:79:a8:09:e8:
         aa:a3:7b:ee:25:c6:07:e4:2c:bb:a8:fb:c8:27:55:61:16:88:
         11:fd:54:3c:30:5c:80:78:06:bd:78:7c:9f:52:d7:fb:34:94:
         65:64:c7:26:e4:fb:51:f5:55:36:1f:4b:f0:76:83:57:35:96:
         26:43:f0:5d:33:50:d5:80:0e:e2:23:51:1b:f1:1c:4c:a3:17:
         22:5a:ae:51:49:35:6e:0f:e0:37:ab:5b:1a:f8:ac:4a:c3:86:
         cc:3b:ba:75:35:78:16:aa:44:3f:c1:1a:fa:b4:c3:0a:24:ee:
         3b:7a:70:80:12:20:19:bb:99:af:29:5d:b3:96:64:b2:18:ea:
         e7:46:6f:06:38:3e:42:54:ec:73:07:a8:e2:9d:63:ad:47:e5:
         a4:d8:75:73:07:ab:c7:32:54:ea:04:f8:d2:23:e8:8c:4f:aa:
         dd:e8:c0:a9:b4:ff:94:fc:ef:44:97:0c:16:0d:5c:c4:2d:89:
         4f:89:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----